---
- hosts: all
  become: true

  vars:
    ansible_python_interpreter: /usr/bin/python3

  roles:
  - role: ansible.timezone

  tasks:
    - name: Update and clean package cache
      apt:
        update_cache: true
        cache_valid_time: 3600
        autoclean: true

    - name: Ensure unattended-upgrades is installed and up to date
      apt:
        name: unattended-upgrades
        state: latest

    - name: Setup unattended-upgrades
      include_role:
        name: ansible-role-unattended-upgrades
      vars:
        unattended_origins_patterns:
          - 'origin=Debian,archive=buster-security'
          - 'o=Debian,a=buster-updates'
        unattended_package_blacklist: [cowsay]
        unattended_mail: 'root'

    - name: Setup users
      include_role:
        name: users



- hosts: tau.netz39.de
  become: true

  vars:
    ansible_python_interpreter: /usr/bin/python3

    docker_compose_version: "1.25.4"
    docker_compose_path: /usr/local/bin/docker-compose

  roles:
  - role: docker
  - role: apache

  tasks:
    - name: Setup docker network
      docker_network:
        name: dockernet
        driver: bridge
        ipam_config:
          - subnet: 192.168.0.0/24
            gateway: 192.168.0.1
        state: present

    - name: Setup forward site reservierung.netz39.de
      include_role:
        name: setup-http-site-forward
      vars:
        site_name: reservierung.netz39.de
        forward_to: https://codimd.pingtech.de/aYsBj5wSTviFTozd8b0P_Q

    - name: Setup proxy site testredmine.netz39.de
      include_role:
        name: setup-http-site-proxy
      vars:
        site_name: testredmine.netz39.de
        proxy_port: 9004

    - name: Setup phpmyadmin
      docker_container:
        name: phpmyadmin
        state: started
        image: phpmyadmin:5.0
        networks_cli_compatible: true
        networks:
          - name: dockernet
        restart_policy: always
        env:
          PMA_HOST: 192.168.0.1
          MYSQL_ROOT_PASSWORD: "{{ mysql_root_pw }}"
          PMA_ABSOLUTE_URI: "https://mysql.adm.netz39.de"
        published_ports:
          - 9001:80

    - name: Setup proxy site mysql.adm.netz39.de
      include_role:
        name: setup-http-site-proxy
      vars:
        site_name: mysql.adm.netz39.de
        proxy_port: 9001